Operation Manual – SSHH3C S3100 Series Ethernet Switches Chapter 1 SSH Configuration1-11Caution:z For password authentication type, the username argument must be consistent withthe valid user name defined in AAA; for publickey authentication, the usernameargument is the SSH local user name, so that there is no need to configure a localuser in AAA.z If the default authentication type for SSH users is password and local AAAauthentication is adopted, you need not use the ssh user command to create anSSH user. Instead, you can use the local-user command to create a user nameand its password and then set the service type of the user to SSH.z If the default authentication type for SSH users is password and remoteauthentication (RADIUS authentication, for example) is adopted, you need not usethe ssh user command to create an SSH user, because it is created on the remoteserver. And the user can use its username and password configured on the remoteserver to access the network.z Under the publickey authentication mode, the level of commands available to alogged-in SSH user can be configured using the user privilege level command onthe server, and all the users with this authentication mode will enjoy this level.z Under the password or password-publickey authentication mode, the level ofcommands available to a logged-in SSH user is determined by the AAA scheme.Meanwhile, for different users, the available levels of commands are also different.z Under the all authentication mode, the level of commands available to a logged-inSSH user is determined by the actual authentication method used for the user.1.3.6 Specifying a Service Type for an SSH UserTable 1-7 Follow these steps to specify the service type for an SSH user:To do... Use the command... RemarksEnter system view system-view —Specify a service type foran SSH userssh user usernameservice-type { stelnet |sftp | all }RequiredBy default, an SSH usercan use the service typeof stelnet.
